Security & Trust

Security and trust

What we do today, stated plainly — including where we're not there yet. For a signed copy of anything below, or to fill out a security questionnaire, contact support@insighthire.com.

Security program

Single sign-on and directory sync

Enterprise customers can require SAML/OIDC sign-in and provision users automatically via SCIM, including mapping identity-provider groups to InsightHire roles.

Encryption in transit

All traffic to and from InsightHire is encrypted (HTTPS/TLS).

Role-based access control

Org admins assign coarse roles (Recruiter, Hiring Manager, Org Admin) and can grant narrower, supplemental permissions on top — for example, a read-only Auditor role scoped to nothing but your organization's own audit log.

Audit log

Org admins (or anyone granted the Auditor role) can view and export a record of security-relevant actions in their own organization — role changes, integration connections, data exports, and any access by InsightHire support.

Compliance

SOC 2

Coming soon.

GDPR and candidate data rights

Candidates and employers can request export or deletion of candidate data. We enforce configurable data-retention schedules by data category (candidate records, video recordings, resumes, assessment responses, logs), with anonymization or deletion once a schedule expires.

OFCCP-related reporting

For federal-contractor customers, we provide a data export (job categories, workforce availability by gender, ethnicity, protected-veteran and disability status, and applicant flow) for use by your own affirmative-action-plan vendor or counsel. This is a data export, not a filed AAP, an adverse-impact analysis, or an EEO-1/VETS-4212 filing — your counsel should prepare those.

Data handling

Where data lives

InsightHire runs as a single-region deployment today. We don't currently offer customer-selectable or multi-region hosting; talk to us if data residency in a specific region is a requirement for your organization.

Sub-processors

We work with a small set of specialized providers to deliver the product — cloud hosting and storage, transcription and AI scoring, video hosting, background-check providers (only when you initiate a check), and, only when you connect them, your own ATS/HRIS integrations. A full, current sub-processor list is available on request.

Availability

Uptime SLA

We don't publish a blanket uptime number — a contractual SLA is available as part of an Enterprise plan and is negotiated as part of that agreement.

Questions, or need something in writing for your own review process? support@insighthire.com